Bad Referal

Kevin Darcy kcd at daimlerchrysler.com
Wed Apr 4 00:02:59 UTC 2001


Y2KNET wrote:

> I am getting of lot of security violation message like:
>
> Apr  3 06:24:05 ns1 named[137]: bad referral (174.147.192.in-addr.arpa !< 182.174.147.192.in-addr.arpa) from [192.147.174.26].53
> Apr  3 04:25:38 ns1 named[137]: bad referral (66.241.207.in-addr.arpa !< 14.66.241.207.in-addr.arpa) from [129.250.35.32].53
> Apr  3 03:58:45 ns1 named[137]: bad referral (157.209.in-addr.arpa !< 110.157.209.in-addr.arpa) from [192.67.14.17].53
> Apr  3 01:10:45 ns1 named[137]: bad referral (66.241.207.in-addr.arpa !< 25.66.241.207.in-addr.arpa) from [192.67.14.16].53
>
> Can someone give me more in formation on bad referral and how to secure
> from them.

Go out and fix the DNS configurations on all of those machines.

Alternatively, define the entire DNS namespace on your server, so that you never have to use other people's
(possibly-misconfigured) nameservers to resolve anything.

Neither of those sound very practical, do they?

                                                                                                - Kevin




More information about the bind-users mailing list